Advanced Persistent Threat

What Is Advanced Persistent Threat?

An Advanced Persistent Threat (APT) is a type of cyber attack that is characterized by its long-term, sophisticated, and targeted nature. APTs are typically conducted by highly skilled and well-resourced attackers, such as nation-states, and are designed to gain access to sensitive data or systems. APTs are often used to steal intellectual property, disrupt operations, or gain access to confidential information. APTs are typically conducted over a long period of time, with attackers using a variety of techniques to gain access to a target system. These techniques may include exploiting vulnerabilities, using social engineering tactics, or deploying malware. Once access is gained, attackers may use a variety of methods to maintain access, such as establishing backdoors, deploying additional malware, or using privilege escalation techniques.

Description

Advanced Persistent Threats (APTs) are long-term, sophisticated, and targeted cyber attacks conducted by highly skilled and well-resourced attackers.

Usage and Examples

APTs are typically used to steal intellectual property, disrupt operations, or gain access to confidential information. For example, in 2017, the US government accused North Korea of conducting an APT against Sony Pictures Entertainment. In this attack, North Korean hackers used a variety of techniques to gain access to Sony's systems, including exploiting vulnerabilities, using social engineering tactics, and deploying malware. Once access was gained, the attackers used a variety of methods to maintain access, such as establishing backdoors, deploying additional malware, and using privilege escalation techniques.